SAP Business Objects Win AD Authentication Error: User Not able to log in

[Former Member]

Whenever any AD user is trying to login to BI launch pad(SAP BO 4.0 SP2), He is getting error and not able to login.

Error Message:

Account Information Not Recognized: Active Directory Authentication failed to

log you on. Please contact your system administrator to make sure you are a

member of a valid mapped group and try again. If you are not a member of the

default domain, enter your user name as UserName@DNS_DomainName, and then try

again. (FWM 00006)

Troubleshooting Done:

1) Checked and validated krb.ini and bsclogin.conf files contents. Entries for Domain name and controller are correct.

2) Checked Path for above mentioned files in Tomcat properties.Path is correctly given as C:\Windows\krb5.ini and C:\Windows\bsclogin.conf

3) Tried to map users from AD domain in CMC, Able to update the same.

4) Ran Kinit <AD User Name> and was successful. Got Output as "New Ticket Is Stored In Cache File........."

But Still not able to login.

Is there any other troubleshooting which I am missing here?

[Former Member · Accepted solution]

Atul,

Check if you are able to login into Manage Servers through Central Configuration Manager.

If thats successful, the issue is either with Krb5.ini or bscLogin.conf file.

You can check http://service.sap.com/sap/support/notes/1631734 and download the white paper to go through the settings.

Make sure there are no white spaces in Krb5.ini and the format is correct.

[Former Member]

Issue Got resolved finally and AD users are able to login again.

1) Path for krb5.ini and bsclogin.conf corrected in tomcat configuration.

2) krb5.ini file contents corrected(DC details)

3) Service account and domain details corrected in CMC.
Thanks Guys for all your inputs. 

[Former Member]

Hi,

A common SPN problem is duplicate SPNs in the AD environment.  Use KB 1387370 to test for duplicate SPN's.

Regards,

Amine.

[TammyPowlas]

Moved to BI platform space for faster response